$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: 8w4mXH42dYyWK9BWsa94h8a2OWHTdqIUf4S70N6Gl4w= Subject key identifier: 67:23:52:57:A5:BE:B6:B4:33:C3:DB:BD:F3:D7:F3:5A:E3:65:43:34 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B1D Signing time: Wed 02 Jul 2025 19:26:54 +0000 Manifest this update: Wed 02 Jul 2025 19:26:54 +0000 Manifest next update: Wed 09 Jul 2025 19:26:54 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: m9p2iuY7ysqp2AeuOFcrdpCvYNBN4O+QfrJ0bjWKn2s=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Jul 2 19:26:54 2025 GMT Not After : Jul 9 19:26:54 2025 GMT Subject: CN=686587fe-e08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:d3:8e:c9:f4:11:da:cb:b8:9c:ec:65:d8: 2e:db:5b:3b:15:1c:75:d0:98:ef:5f:50:fb:9d:ec: 9d:ba:56:d9:a1:03:bf:26:81:38:3a:17:62:85:63: 2f:94:6d:fb:56:d3:7c:bd:06:34:32:18:df:47:f3: 82:88:02:21:15:d8:99:42:c0:31:f6:9c:b5:66:f3: ab:a1:f7:1e:d1:75:15:35:34:7c:4d:70:59:84:dc: 16:81:8c:d7:21:6a:c3:e2:23:74:56:85:a5:21:79: 2d:64:fc:09:84:4e:1a:56:73:b4:13:db:72:e5:08: 27:72:2e:20:80:86:c4:ef:43:26:c7:76:e4:fc:13: c6:8d:44:55:3a:fb:0d:b5:3b:ec:91:8c:4d:70:9e: 8f:be:b9:09:4a:be:6d:39:85:07:11:3f:63:d9:92: 34:a7:23:db:92:43:6a:1b:57:4c:bc:c4:2b:8b:55: c3:8d:ac:b7:4b:7f:4e:b8:57:e9:62:7c:a6:83:da: 19:f5:a1:a9:b9:87:05:e7:1b:57:e6:c3:54:b3:27: 9e:cd:a9:5c:ed:98:d9:40:ed:76:a1:b0:a4:63:31: 0e:f9:80:30:3d:96:ad:24:a7:37:7e:57:86:7d:66: 3b:b8:4c:7d:f9:24:59:6b:50:c3:78:11:2e:d4:a9: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:52:57:A5:BE:B6:B4:33:C3:DB:BD:F3:D7:F3:5A:E3:65:43:34 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:31:ae:bd:c8:f3:7e:e5:54:b6:29:33:32:19:73:6b:e2:b0: 2d:67:51:42:22:e8:14:1e:86:14:dd:d4:67:ed:f1:b9:34:c2: e0:2d:0e:f3:00:54:e1:60:0c:50:e4:47:e9:b8:8c:78:4c:c3: 89:38:6c:bb:42:07:93:cc:94:1b:75:aa:f3:c7:b2:51:16:6c: 71:af:41:82:08:44:5b:24:8d:c8:c3:37:47:d2:99:e3:ae:13: 91:19:00:ca:e0:58:6a:36:c5:68:b0:19:12:14:57:1c:7c:c8: 90:78:c6:29:ea:16:79:35:31:30:f1:35:0a:7d:9d:77:8d:e9: 95:0d:02:0e:08:d8:95:23:54:89:35:75:cb:9b:96:0a:90:7d: 89:04:e7:1e:12:62:c4:6c:86:4b:24:46:1a:d8:77:5c:00:c2: ce:f1:d3:43:05:ab:c8:6d:56:89:18:4b:04:18:fa:ad:a3:1e: 18:03:df:ca:4c:2e:a2:e7:91:52:0e:9d:9d:21:d9:5f:c8:4e: c0:14:03:d9:91:7b:01:32:df:9f:f3:16:4f:a7:45:61:98:ac: 9c:c1:2e:cd:2e:13:a8:29:b7:94:72:f3:58:49:f7:4b:ca:61: 5b:f0:8c:13:32:9e:37:87:c0:76:04:2a:de:a9:7b:4e:90:f2: cf:ed:ad:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUwNzAyMTkyNjU0WhcNMjUwNzA5MTkyNjU0WjAYMRYwFAYD VQQDEw02ODY1ODdmZS1lMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGfTjsn0EdrLuJzsZdgu21s7FRx10JjvX1D7neydulbZoQO/JoE4OhdihWMv lG37VtN8vQY0MhjfR/OCiAIhFdiZQsAx9py1ZvOrofce0XUVNTR8TXBZhNwWgYzX IWrD4iN0VoWlIXktZPwJhE4aVnO0E9ty5Qgnci4ggIbE70Mmx3bk/BPGjURVOvsN tTvskYxNcJ6PvrkJSr5tOYUHET9j2ZI0pyPbkkNqG1dMvMQri1XDjay3S39OuFfp Ynymg9oZ9aGpuYcF5xtX5sNUsyeezalc7ZjZQO12obCkYzEO+YAwPZatJKc3fleG fWY7uEx9+SRZa1DDeBEu1Kl+awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcjUlel vra0M8PbvfPX81rjZUM0MB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQMa69yPN+5VS2KTMyGXNr4rAtZ1FCIugUHoYU3dRn7fG5NMLgLQ7z AFThYAxQ5EfpuIx4TMOJOGy7QgeTzJQbdarzx7JRFmxxr0GCCERbJI3IwzdH0pnj rhORGQDK4FhqNsVosBkSFFccfMiQeMYp6hZ5NTEw8TUKfZ13jemVDQIOCNiVI1SJ NXXLm5YKkH2JBOceEmLEbIZLJEYa2HdcAMLO8dNDBavIbVaJGEsEGPqtox4YA9/K TC6i55FSDp2dIdlfyE7AFAPZkXsBMt+f8xZPp0VhmKycwS7NLhOoKbeUcvNYSfdL ymFb8IwTMp43h8B2BCreqXtOkPLP7a0s -----END CERTIFICATE-----Generated at Thu Jul 3 06:05:23 2025 by rpki-client